Technology Integration
Impact: Important
Strength: Medium
Conf: 80%
Cisco Launches Encrypted Visibility Engine for TLS/QUIC Blind Spots
Summary
Cisco introduces Encrypted Visibility Engine (EVE) using ML to fingerprint ClientHello messages for encrypted traffic analysis without decryption. Integrates 10,000+ process fingerprints and 35B connection data, enabling intelligent bypass deployment.
Key Takeaways
Cisco launches Encrypted Visibility Engine (EVE) addressing TLS/QUIC encrypted traffic blind spots. EVE uses ML to fingerprint ClientHello messages for client application/process identification, with 10,000+ process fingerprint database.
Provides bypass deployment with risk-based decryption skipping. Case study detected Kazy trojan C2, Psiphon evasion in 48 seconds.
Provides bypass deployment with risk-based decryption skipping. Case study detected Kazy trojan C2, Psiphon evasion in 48 seconds.
Why It Matters
which may affect the direction of next-generation firewall technology. Cisco uses the non-decryption detection technology to strengthen the competitiveness of security products and promote the evolution of encrypted traffic analysis from passive decryption to intelligent fingerprint identification
💬 Comments (0)